While this attack does not discuss that particular detail, there have been many documented methods for breaking out of the sandbox (you can google around to see

While this attack does not discuss that particular detail, there have been many documented methods for breaking out of the sandbox (you can google around to see citations). I think for most attackers getting access to the user's WoW API is the goal.